Updates 2/19/19 - Pale Moon, CCleaner

Pale Moon v28.4.0 (2019-02-19)

https://www.palemoon.org/releasenotes.shtml

This is a major development, stability and security release.

Changes/fixes:

• Removed more telemetry code from the platform.
• Fixed implementation of the IntersectionObserver API to avoid crashes, and enabled it by default.
• Switched to the new ffmpeg decode API to avoid dropping of frames.
• Fixed a buffering issue in the WebP decoder that caused intermittent browser crashes.
• Improved resource-efficiency for internal stopwatch timers.
• Improved handling of incorrectly-encoded CTTS in media files, resolving some playback issues of videos.
• Improved the Cycle Collector and Garbage Collector.
• Improved fullscreen navigation bar handling in the situation it has focus when switching to full screen.
• Aligned instanceof with the final ES6 spec.
• Improved Windows DIB (bitmap) clipboard data handling.
• Exposed TLS 1.3 cipher suite prefs in about:config in case people want to disable them individually.
• Allowed empty string on the location.search setter to clear URL query parameters from JS.
• Added a potential fix for external links not opening in the current window/tab (untested).
• Enabled C++11 thread-safe statics in the entire application.
• Updated several preferences for integration with the new add-ons site.

Security fixes:

• Fixed a potential use-after-free in IndexedDB code. (DiD)
• Improved proxy handling to avoid localhost getting proxied. (CVE-2018-18506)
• Ported upstream Skia fixes. (CVE-2018-18356, CVE-2018-18335)
• Fixed an additional Skia issue. (CVE-2019-5785)
• Fixed several potentially-exploitable memory safety hazards and crashes. (DiD)
• Fixed a possible data race when performing compacting GC.

DiD - This means that the fix is "Defense-in-Depth": It is a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code, e.g. when surrounding code changes, exposing the problem, or when new attack vectors are discovered.

-----------------------------------------------------------------

Update via the internal Updater:   Help / About Pale Moon ; or full downloads:

https://www.palemoon.org/download.shtml